Senior Active Directory & Entra ID Architect

METRIX IT SOLUTIONS INC

Louisville (KY)

On-site

USD 110,000 - 140,000

Full time

9 days ago

Get a reply from this employer

Your resume and cover letter, tailored to exactly what they’re hiring for.

Get past ATS filters

Job summary

METRIX IT SOLUTIONS INC in Louisville, KY seeks a Senior Active Directory Engineer to join the Infrastructure Engineering and Design team. You will manage AD DS, Entra ID, federation, and directory synchronization across on-premises and cloud-connected environments.

The role combines design, operations, and security responsibilities, driving reliability, policy management, and IAM best practices while collaborating with security, server, and subsidiary technology teams.

Qualifications

Degree in Computer Science, Information Technology, or a related field, or equivalent professional experience.
Experience managing enterprise identity and access management operations.
Strong knowledge of Microsoft Entra ID tenant environments and traditional on-premises Active Directory configurations.
Hands-on experience supporting Active Directory Domain Services, Microsoft Entra Connect, AD FS, WAP, Kerberos, Group Policy, and enterprise authentication services.
Experience troubleshooting complex directory, synchronization, federation, replication, and authentication problems with minimal guidance.
Knowledge of scripting and data analysis using PowerShell, SQL, Microsoft Access, Microsoft Excel, and data-mapping techniques.
Experience designing and executing Active Directory backup and recovery processes.
Experience capturing server memory dumps for advanced troubleshooting.
Excellent analytical skills, attention to detail, and ability to translate technical findings into clear actions.
Excellent written, verbal, and presentation skills, including proficiency with Microsoft PowerPoint and Excel.
Ability to prioritize work independently and provide clear, documented status updates and metrics to management.
Ability to learn and adapt quickly to new concepts, capabilities, tools, and changing business requirements.
Ability to pass a federal clearance or background check to support dedicated United States Government environments.

Responsibilities

Provide enterprise operational and engineering support for Microsoft Active Directory and Microsoft Entra ID environments.
Design, implement, maintain, and document Active Directory forests, domains, organizational units, sites, subnets, domain controllers, and replication topology.
Monitor and assess health, availability, capacity, performance, and configuration of directory servers and supporting services.
Troubleshoot replication, domain controller location, name resolution, federation, authentication, authorization, and directory synchronization issues.
Monitor Kerberos authentication, including service principal name, delegation, ticketing, and time-synchronization dependencies.
Manage non-production and test environments used to validate directory service changes, integrations, and recovery procedures.
Create and maintain engineering standards, templates, processes, procedures, support documentation, and operational runbooks for Active Directory services.
Provide technical leadership, knowledge transfer, and mentoring to engineers and operational support teams.
Partner with Server Engineering teams to validate Group Policy settings and lifecycle controls in AGPM.
Support group managed service accounts, service identities, and related Active Directory configurations.
Collaborate with Security Engineering to identify privilege-escalation paths and directory security risks.
Apply least-privilege, separation-of-duties, privileged-access, and Tier 0 security principles.